Solved

Time Server

Posted on 2008-10-22
7
210 Views
Last Modified: 2012-05-05
I configured authoritative time server at the top parent domain for my whole forrest.  Server is synchronizing with us.pool.ntp.org.  We have child domains in different countries.  Time changed in one of these countries  and both DC's in this country do not reflect the change because they get their time from top parent domain DC.  How do I stop these DC's from synchronizing with top DC so time can be modified manually in both servers and they reflect local time?  All servers are Windows 2003 Servers.
0
Comment
Question by:virtech
  • 3
  • 3
7 Comments
 
LVL 18

Expert Comment

by:flyingsky
ID: 22779749
0
 
LVL 58

Expert Comment

by:tigermatt
ID: 22779774

You change the time-zone on the remote DCs to the appropriate time zone. The time they sync from the time server on the network will come down in GMT, but if you set the appropriate offset as the time zone (+/- x hours GMT), Windows will adjust the GMT time it receives with the appropriate offset.

-tigermatt
0
 

Author Comment

by:virtech
ID: 22779818
Tiger I am not sure I follow your suggestion.  Would you please explain?
0
Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

 
LVL 58

Expert Comment

by:tigermatt
ID: 22779973

In the Date/Time option in Control Panel, you can choose the 'Time Zone' tab at the top and set the appropriate time zone on the other servers so their time is updated correctly.

Windows handles time back-end in GMT, so changing the time zone means the time is synced from the other DCs in GMT, but then the time zone offset is added to correct this time to whichever timezone the server is located in.

This is the preferred solution. You should not try to directly change the time on these servers, because a difference of +/- 5-15 minutes in the time between servers and workstations will result in failed logins and a failure to authenticate and replicate between DCs, causing fatal issues on the network. This is why the time synchronization facility exists and is enabled by default.

-tigermatt
0
 

Author Comment

by:virtech
ID: 22785423
If I understood you correctly I did the following on my two remote Domain Controllers on child domain in different country.  I changed their time zones to a zone that added 2 hours to their time so now they have the correct time.  Time has remained "correct" since yesterday.

1.  Is this what you suggested?
2. Local workstations on that domain still have wrong time (not the time of the servers)  How do I make sure workstations get their time from these servers?

Thanks.
0
 
LVL 58

Accepted Solution

by:
tigermatt earned 500 total points
ID: 22789885

1. Yes, that is correct; changing the timezone will force it to keep the time at that particular offset even when the re-sync occurs.

2. You need to change the time zone on the workstations. It is set when they are installed, but if it was set wrongly, they will need to be changed. You could try doing it through Group Policy; there's details in the 'Networked PCs' section of http://support.microsoft.com/kb/914387.

-tigermatt
0
 

Author Closing Comment

by:virtech
ID: 31508886
Excelent answer and knowledge
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
why user can't see mapped share folder 8 47
OPINIONS please : best Active Directory Monitoring tool 5 138
Event ID: 5719 / Source: NETLOGON 9 129
DHCP server 6 61
by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
This Micro Tutorial will teach you how to censor certain areas of your screen. The example in this video will show a little boy's face being blurred. This will be demonstrated using Adobe Premiere Pro CS6.
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question